Security Scan Report: memarat.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 6 domains to perform 112 HTTP transactions. The main domain is memarat.com and was registered 5 years ago.

Submitted URL: https://memarat.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate pool-construction business whose site is compromised: an injected ClickFix/EtherHiding loader plus critical Intrusion Detection System malware alerts and the flagged ClickFix domain zvh4.com make visiting unsafe.

Risk Factors (4)
Compromised page serves a ClickFix/EtherHiding malware loader to visitors
Critical network Intrusion Detection System malware alerts for EtherHiding exfiltration and the ClickFix domain zvh4.com
Obfuscated script reaches blockchain contract and threat-listed RPC/tooling hosts only after decoding
Multiple corroborated Indicators of Compromise tied to the page's loaded resources
Domain age information unavailable

Details

Page Title

گروه استخر سازان ممارت : ساخت استخر + خرید تجهیزات استخر

Scan Type

public

Domain Name Analysis

The domain name 'memarat.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'memarat' covers 7 characters containing 3 vowels alongside 4 consonants. Tokenizing the label suggests two words: me, marat. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Leyte Cals, v CuuSly/ 9209 v Le Hl)2 Sig Le glo ojgyy wv Gightad 9 CAL Slugs v dyiual pilD 9 Gany Ele! v pul ljugad wv sjghe 9 dutul Lol ando hugs g baal SL digo} 12 clique »@ plas Ipiesd yo ayls il...

Page Load Overview

10.84s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR
Text Length:4,749 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%
news/blog
40%

Detected Features

Search
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22185.223.160.83Iran
AS212216Netafraz Iranian Ltd.
18194.62.17.30Iran
AS57497Faraso Samaneh Pasargad Ltd.
1845.135.243.142Iran
AS57497Faraso Samaneh Pasargad Ltd.
18104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18212.16.67.4Iran
AS34837Institute for Research in Fundamental Sciences
1126--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A644D7B335C9143612BBD29BA0692B1CC793DD12D452B1E4B3FE8F584BE8CA3B243654

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:aRdZ50pDtJqsdBq3wTC3LZIDmyOqvq3g1SQb:aRdP4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:255796:AhBSIgWhMnICBCscSA4BlYD8cglEgGwVCokBJKAc76SUBgIoOaBQAQoOCrGQAlQAQEb4KBRGIaipoAQLQmDEDRAdYJEEIigE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff11000303c3c3ff
Perceptual Hash:ad03d2ed85b6c878
Difference Hash:00e3f17e32030f85
Wavelet Hash:ff31000303c3c7ff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data